Description

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.

Remediation

References

CVE-2021-26028

Related Vulnerabilities

WordPress Plugin WooCommerce Remote Code Execution (4.0.1)

WordPress Plugin Admin Pack by SITE CASEIRO Cross-Site Scripting (1.1)

Liferay Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-28885)

Jenkins Other Vulnerability (CVE-2015-5319)

MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-8115)

Severity

Medium

Classification

CVE-2021-26028 CWE-22 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities